New

Senior Software Engineer | AI Security Engineering

Austin, Texas, United States; California, USA; Canada; Colombia; Colorado, USA; Connecticut, USA; Florida, USA; Georgia, USA; Illinois, USA; Kansas, USA; Maine, USA; Maryland, USA; Massachusetts, USA; New Jersey, USA; New York, USA; North Carolina, USA; Ohio, USA; Oregon, USA; Tennessee, USA; Texas, USA; Virginia, USA; Washington, USA

About us

NinjaOne unifies IT to simplify work for nearly 40,000 customers in 140+ countries

The NinjaOne Unified IT Operations Platform delivers endpoint management, autonomous patching, backup, and remote access in a single console to improve efficiency, increase resilience, and reduce spend. By automating IT and managing all endpoints, organizations give employees a great technology experience at work.

NinjaOne is obsessed with customer success and has retained a 98% customer satisfaction score for more than 5 years.

About the Role

NinjaOne’s Application Security Engineering team is looking for a Senior Software Engineer to assist in building an AI platform that discovers vulnerabilities in production code, validates findings against real attack paths, and proposes tested fixes. You will build and own the software that makes this work reliable at scale, partnering with Security Architecture and Product Engineering to turn security research into actionable improvements across our cloud platform and endpoint agents.

This is a hands-on software engineering role with ownership from design through production. You will solve problems in agent orchestration, durable execution, context management, evaluation, and cost control. Your work will help engineers find and fix meaningful vulnerabilities earlier, with evidence they can trust.

We are hiring four engineers across two focus areas: Vulnerability Discovery and Finding Validation, with two openings in each. We will discuss your preference during interviews. Discovery develops and tests vulnerability hypotheses; Validation independently challenges findings and develops evidence-backed fixes. Separate model families and independent ownership help each stage check the other’s conclusions.



Location - We are flexible on remote working from home, if you are located in the USA and reside in one of the following states - CA, CO, CT, FL, GA, *IL, KS, MA, MD, ME, NJ, NC, NY, OH, OR, TN, TX, VA, and WA. We have physical offices in Austin, TX and Tampa, FL, if you prefer a hybrid option.

*Onsite interviews may be required for this role.

We hire the best software engineers, but experience in our stack can’t hurt: NinjaOne is built on Java, Kotlin, C++, Golang and Postgres; supporting millions of user endpoints and running as a scalable cloud service in AWS.  Knowing large-scale datastore bottlenecks, asynchronous application design and client-server architecture will help you.

What You’ll be Doing

  • Build and operate a production AI vulnerability platform with resumable workflows, bounded agent execution, model routing, and per-repository budgets across AWS Bedrock and OpenAI-compatible APIs.
  • Engineer repository context, threat models, and coverage tracking so agents can reason about entry points, trust boundaries, tenant isolation, and relevant code paths.
  • Build independent validation, stable finding identity, and deduplication. Ground reachability and exploitability of judgments in code, deployment evidence, and reproducible tests.
  • Develop patch and regression-test workflows that demonstrate a failing test before a fix and a passing test afterward, check for regressions, and require human review before merging.
  • Protect agent execution with sandboxing, least-privilege tool access, and controls for untrusted repository content, prompt injection, secrets, and sensitive data.
  • Partner with security and engineering teams to deliver findings through SARIF and existing workflows. Measure validated finding quality, coverage, reliability, and cost per validated finding; communicate results and share engineering practices.
  • Other duties as needed

About You

  • 8+ years of software engineering experience, including ownership of production services or automation platforms, and hands-on experience building LLM-backed applications or agent workflows.
  • Strong Python skills, including asynchronous concurrency, typing, testing, packaging, and profiling. You can design, ship, debug, and maintain production-quality software.
  • Experience building multi-step workflows with durable state, idempotent retries, task queues, termination conditions, observability, and resource limits. You can explain the failure modes and tradeoffs of systems you have shipped.
  • Hands-on experience with LLM APIs, tool calling, structured outputs, context management, and evaluation. You can assess when to use an agent framework and when simpler orchestration is more reliable.
  • Experience with AWS or comparable cloud infrastructure and distributed systems. Familiarity with model provider integrations, container isolation, and secure handling of code and credentials.
  • Working knowledge of application security, including authentication, authorization, common vulnerability classes, and trust boundaries. You can use evidence to distinguish a plausible hypothesis from an actionable finding.
  • Ability to work through ambiguity, collaborate with product and security engineers, and communicate technical decisions and results to engineering and leadership audiences.
  • Bachelor’s degree in Computer Science, Information Technology, or a related field, or equivalent practical experience.

What You’ll Love 

We are a collaborative, kind, and curious community.
We honor your flexibility needs with full-time work that is hybrid remote.
We have you covered with our comprehensive benefits package, which includes medical, dental, and vision insurance.
We help you prepare for your financial future with our 401(k) plan.
We prioritize your work-life balance with our unlimited PTO.
We reward your work with opportunity for growth and advancement.

Additional Information

This position is NOT eligible for Visa sponsorship. Due to federal government security requirements associated with our FedRAMP-authorized environment, candidates must be U.S. citizens or lawful permanent residents.

*Due to operational policies, NinjaOne is unable to hire for this role within the city limits of Chicago. We will consider all qualified candidates who reside outside of the city proper or are willing to self-relocate.

#LI-MM1
#LI-REMOTE

 

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO. This position may also be eligible for bonus, commission, equity, or other incentive compensation, as applicable.

Base salary hiring range for roles based in California, Colorado, Maryland, New Jersey, or Washington

$140,000 - $230,000 USD

Starting pay for the successful applicant depends on a variety of job-related factors, including but not limited to location, market demands, experience, job-related knowledge, and skills. The benefits available for this position include medical, dental, vision, 401(k) plan, life insurance coverage and PTO. This position may also be eligible for bonus, commission, equity, or other incentive compensation, as applicable.

Base salary hiring rang for roles based in New York

$140,000 - $230,000 USD

All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, genetic information, marital status, veteran status, or any other status protected by applicable law. We are committed to providing an inclusive and diverse work environment.

Candidate Privacy
When you apply, NinjaOne collects and uses your personal information to review your application and manage the hiring process. To learn how we use, store, and protect your data, and what your rights are, please read our Candidate Privacy Policy at https://www.ninjaone.com/candidate-privacy-policy.

Apply for this job

*

indicates a required field

Resume/CV*

Accepted file types: pdf, doc, docx, txt, rtf

Cover Letter

Accepted file types: pdf, doc, docx, txt, rtf

Select...
Select...
Select...

Write the yearly amount and currency. Include regular pay and extra pay, like bonus or sales commission. Example: 60,000 USD

Select...
Select...

Sponsorship means a company helps you get or keep permission to work in the country where the job is located. This can be a visa, a work permit, or another immigration application that an employer must submit for you. It does not include the normal check of your right to work that every new employee completes. Please see the job description to find out if sponsorship is available for this job.

Select...

“This way” means the location and workplace type (remote, hybrid, or onsite) in the job posting. Please check the posting before you answer.

Select...

Answering "Yes" means that you can do the job in either situation.

Select...
Select...

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in NinjaOne’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Select...
Select...
Race & Ethnicity Definitions

If you believe you belong to any of the categories of protected veterans listed below, please indicate by making the appropriate selection. As a government contractor subject to the Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), we request this information in order to measure the effectiveness of the outreach and positive recruitment efforts we undertake pursuant to VEVRAA. Classification of protected categories is as follows:

A "disabled veteran" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A "recently separated veteran" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An "active duty wartime or campaign badge veteran" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An "Armed forces service medal veteran" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

Select...